# SNMP Ingestion

Astral supports monitoring through **SNMP (Simple Network Management Protocol)**, enabling the collection of operational and security-relevant information from network and infrastructure devices. This capability allows Astral to ingest events and metrics from devices such as switches, routers, firewalls, appliances, and other systems that expose status and activity through SNMP.

SNMP monitoring focuses on receiving and interpreting data related to device state, availability, configuration changes, and abnormal conditions. By collecting traps, notifications, and polled information, Astral gains visibility into infrastructure behavior that may indicate faults, misuse, or security-relevant events. These signals complement log-based and network traffic data, contributing to a more complete understanding of the environment.

All SNMP-derived data is processed through Astral’s unified analysis pipeline. Events are analyzed, normalized, and correlated with information from other sources, including logs, network activity, identity events, and cloud telemetry. This correlation allows infrastructure-level signals to be evaluated in context, improving detection accuracy and helping distinguish operational issues from security incidents.

By integrating SNMP monitoring into the Astral SIEM, infrastructure events become part of the same operational security workflow as other detections. SNMP-based signals can trigger identification, prioritization, and response actions through Inopli’s Response and RPA capabilities, ensuring that infrastructure-related risks are addressed within a centralized and auditable security operation.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.inopli.com/astral/data-ingestion/log-sources/snmp-ingestion.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
